4,624 skills sorted by stars.
Runs a bounded experiment loop under an approved budget: one change per iteration, scored by a declared metric or evalua...
Autonomous research and experimentation toolkit with 10 commands. Core loop inspired by Karpathy's autoresearch — genera...
Adversarial multi-round reasoning with blind-judge panel to reach rigorous conclusions. TRIGGER when: user wants rigorou...
Iterative security audit engine. Performs STRIDE threat modeling, OWASP Top-10 checks, attack surface mapping, and mitig...
Structured Codex, Claude, Amp, Pi, or Kimi code review when explicitly requested.
Use the AWF (Agentic Workflow Firewall) to run commands with network isolation and domain whitelisting. Provides L7 HTTP...
Concise AWS Bedrock AgentCore guide for deploying/operating Gateway, Runtime, Memory, Identity, MCP targets, and credent...
AWS Backup coverage and data protection posture review. Determines which backup-eligible resources are protected by AWS...
Configure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activit...
Use when working with Aws Cognito — aWS Cognito user pool analysis, identity pool management, authentication flow analys...
Exploit misconfigurations in AWS Cognito, specifically focusing on unauthorized identity pool access, user pool self-re...
Automated compliance checking against CIS, PCI-DSS, HIPAA, and SOC 2 benchmarks
Use this skill when someone wants an Amazon EKS cluster graded against best practices. Use it when they ask to review, a...
Use when managing AWS IAM.
Manage AWS IAM users, roles, policies, and access keys.
IAM policy review, hardening, and least privilege implementation
Routes AWS networking requests to the correct service skill for implementation. Covers Route 53 (DNS, health checks, rou...
Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escal...
This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infr...
AWS post-exploitation — 92 programs for full kill chain from recon to cleanup via AWS CLI
AWS Secrets Manager patterns using AWS SDK for Java 2.x. Use when storing/retrieving secrets (passwords, API keys, token...
Store and rotate secrets in AWS Secrets Manager. Configure automatic rotation, access policies, and application integrat...
Automate AWS secrets rotation for RDS, API keys, and credentials
Use when securing AWS.
Comprehensive AWS security posture assessment using AWS CLI and security best practices
AWS serverless/event-driven playbook for Lambda, API Gateway, EventBridge, SQS/SNS, Step Functions with IaC/observabilit...
Axiom — First-Principles Assumption Auditor / 第一性原理拆解器 workflow skill. Use this skill when the user needs First-principl...
Use when the user wants to audit Aztec Network smart contracts written in Noir, scan for privacy-specific vulnerabilitie...
Build content moderation applications with Azure AI Content Safety SDK for Java. Use when implementing text/image analys...
Expert knowledge for Azure Attestation development including troubleshooting, best practices, security, configuration, a...
Microsoft Entra ID (Azure AD) authentication for React SPAs with MSAL.js and Cloudflare Workers JWT validation using jos...
Expert knowledge for Azure Bastion development including troubleshooting, best practices, decision making, architecture...
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, re...
Comprehensive Azure compliance and security auditing capabilities including best practices assessment, Key Vault expirat...
Expert knowledge for Azure Confidential Ledger development including decision making, security, integrations & coding pa...
Expert knowledge for Azure AI Content Safety development including troubleshooting, best practices, decision making, arc...
Azure cost management: query costs, forecast spending, optimize to reduce waste. WHEN: "Azure costs", "Azure bill", "cos...
Expert knowledge for Azure Defender For Cloud development including troubleshooting, best practices, decision making, ar...
Expert knowledge for Azure External Attack Surface Management development including limits & quotas, configuration, and...
Expert knowledge for Azure Firewall Manager development including best practices, decision making, security, and configu...
Azure Identity Java SDK for authentication with Azure services. Use when implementing DefaultAzureCredential, managed id...
Azure Identity SDK for Python authentication. Use for DefaultAzureCredential, managed identity, service principals, and...
Azure Identity SDK for Rust authentication. Use for DeveloperToolsCredential, ManagedIdentityCredential, ClientSecretCre...
Expert knowledge for Azure Information Protection development including best practices, decision making, configuration,...
Manage secrets and certificates in Azure Key Vault. Configure access policies, integrate with Azure services, and implem...
Azure Key Vault Certificates SDK for Rust. Use for creating, importing, and managing certificates.
Azure Key Vault Certificates SDK for Rust. Use for creating, importing, and managing certificates. Triggers: "keyvault c...